SY0-701 Question 112
Single answerPhysical attacks: Brute force , Radio frequency identification (RFID) cloning , EnvironmentalA company stores backup tapes and network equipment in a small branch office server room. Over one weekend, an attacker enters the building after hours, opens the server room using a copied employee proximity badge, and repeatedly tries combinations on the mechanical key safe until it opens. The next day, staff also discover that high humidity from a failed HVAC unit caused condensation on several devices. Which of the following BEST identifies the attacks and conditions involved in this incident?
- A
Tailgating, credential stuffing, and data remanence
- B
RFID cloning, brute-force attack, and an environmental issue
- C
Dumpster diving, password spraying, and electromagnetic interference
- D
Shoulder surfing, replay attack, and a logic bomb
Show answer and explanation
Correct answer: B
Explanation
The best answer is RFID cloning, brute-force attack, and an environmental issue. In physical security contexts covered by Security+, RFID cloning refers to duplicating data from a contactless access badge so an attacker can impersonate an authorized user at a door reader. Brute force is not limited to passwords; it also applies to physical locks or safes when an attacker systematically tries combinations until one works. Environmental threats include HVAC failures, excessive humidity, condensation, temperature extremes, water exposure, and similar conditions that can damage equipment or disrupt operations. Best practices include using badge technologies resistant to cloning where possible, implementing layered physical controls such as guards, cameras, and logs, rotating or replacing weak mechanical access mechanisms, and maintaining environmental controls in line with equipment manufacturer guidance and common data center practices such as monitored HVAC and humidity management.
- A. Incorrect.
Incorrect. Tailgating involves following an authorized person into a restricted area without using one's own credentials, which does not match the copied proximity badge described. Credential stuffing is the automated reuse of known username/password pairs against authentication systems, not repeated attempts on a mechanical key safe. Data remanence refers to residual data remaining on storage media after attempted deletion, which is unrelated to the humidity and condensation issue in the scenario.
- B. Correct.
Correct. Copying an employee proximity badge is a classic example of RFID cloning when the badge uses RFID-based access control. Repeatedly trying combinations on a mechanical key safe is a brute-force physical attack because the attacker is systematically attempting possible combinations until the lock opens. High humidity and condensation from HVAC failure are environmental issues that can damage hardware and affect availability.
- C. Incorrect.
Incorrect. Dumpster diving is the practice of searching discarded materials for useful information, which is not described here. Password spraying is trying a small number of common passwords across many accounts, which does not apply to a physical key safe. Electromagnetic interference can affect equipment operation, but the scenario specifically points to humidity and condensation from HVAC failure, which is an environmental condition rather than EMI.
- D. Incorrect.
Incorrect. Shoulder surfing is observing someone enter sensitive information, which is not how the attacker gained access in this scenario. A replay attack involves capturing and retransmitting valid authentication data in a communication protocol, which is different from cloning a badge. A logic bomb is malicious code triggered by specific conditions and has nothing to do with the physical and environmental events described.